Privacy Policy

TradeLab is a personal trading journal application operated by an independent developer. If you have any questions about this policy, contact us at [email protected].

We collect the following categories of data:

• Account data: Email address and authentication identifiers (e.g., your user ID from our authentication provider).
• Journal entries & notes: Trade records, notes, emotions, and observations you manually enter into the app. This data is stored solely to provide the Service to you.
• Trading metadata: Optional fields such as entry price, exit price, quantity, P&L, setup type, and date — entered voluntarily by you.
• Usage analytics: We may collect anonymized usage data (e.g., page views, feature usage) to improve the product. This data does not identify you personally.
• Billing & subscription data: Subscription status, plan type, and billing cycle. Payment transactions are handled entirely by Paddle as our Merchant of Record. TradeLab does not store or process your card number, bank details, or other payment credentials. We receive from Paddle only the data necessary to manage your subscription (e.g., subscription status, renewal dates).

We use the data we collect to:

• Provide, operate, and maintain the TradeLab Service.
• Authenticate your account and keep it secure.
• Manage your subscription and process billing through Paddle.
• Send transactional communications related to your subscription (e.g., trial expiry reminders, renewal confirmations).
• Respond to support requests and communications.
• Improve and develop product features based on usage patterns.
• Comply with legal obligations.

We do not sell your personal data to third parties. We do not use your journal entries or trade records for advertising purposes.

Lawful basis (GDPR / UK GDPR)

Where applicable, we process your personal data on the following lawful bases:

• Contract performance — to provide the Service you signed up for, including managing your subscription.
• Legitimate interests — to improve product features, prevent abuse, and ensure security.
• Legal obligation — to comply with applicable laws and regulations.
• Consent — where you have opted in to specific communications or analytics.

TradeLab relies on the following third-party providers:

• Supabase: Our database and authentication provider. Your account data and journal data are stored on Supabase infrastructure.
• Paddle (Merchant of Record): Paddle processes subscription payments and acts as the Merchant of Record for all transactions. When you subscribe, your payment details and billing information are handled directly by Paddle under their own privacy policy. TradeLab shares your email address with Paddle to create your customer record and manage your subscription. See Paddle's Privacy Policy for details on how they process your data.
• Hosting provider: The application is hosted on a cloud infrastructure provider. Data may be stored on servers in the United States or other regions. Where data is transferred outside the European Economic Area, appropriate safeguards are applied in accordance with applicable data protection law.
• Analytics provider (optional): If anonymized analytics are enabled, an analytics service may process aggregated, non-personal usage data.

We retain your data for as long as your account is active or as necessary to provide the Service. If you delete your account, we will delete or anonymize your personal data within a reasonable time, except where retention is required by applicable law (e.g., financial records required by tax regulations).

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your account and associated data.
• Request an export of your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with your local data protection authority.

To exercise these rights, contact us at [email protected]. We will respond within a reasonable timeframe and no later than 30 days.

TradeLab may use browser local storage to persist your preferences (such as the selected trading account or language preference). We do not use tracking cookies for advertising purposes.

We implement reasonable technical and organizational measures to protect your data. However, no method of transmission or storage is 100% secure. We encourage you to use a strong, unique password for your account.

TradeLab is not intended for users under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the revised policy.

For privacy-related questions or requests, contact us at [email protected].